Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2371 6.1 警告
Local 		オラクル Oracle Cloud Infrastructure CLI オラクルのOracle Cloud Infrastructure CLIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35254 2026-05-8 12:10 2026-05-6 Show GitHub Exploit DB Packet Storm
2372 6.6 警告
Local 		オラクル Oracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI) オラクルのOracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI)におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-35255 2026-05-8 12:10 2026-05-6 Show GitHub Exploit DB Packet Storm
2373 5.5 警告
Local 		ikea DIRIGERA Firmware ikeaのDIRIGERA Firmwareにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-3588 2026-05-8 12:10 2026-03-9 Show GitHub Exploit DB Packet Storm
2374 10 緊急
Network 		Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-39906 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
2375 10 緊急
Network 		Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-39907 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
2376 7.5 重要
Network 		ZTE ZXESM iEMS ZTEのZXESM iEMSにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-40436 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
2377 7.5 重要
Network 		MIYAGAWA (Tatsuhiko Miyagawa) Starman MIYAGAWA (Tatsuhiko Miyagawa)のStarmanにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-40560 2026-05-8 12:10 2026-04-29 Show GitHub Exploit DB Packet Storm
2378 5.3 警告
Network 		Kazuho Oku (kazuho) Starlet Kazuho Oku (kazuho)のStarletにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-40561 2026-05-8 12:10 2026-05-3 Show GitHub Exploit DB Packet Storm
2379 7.5 重要
Network 		NERDVANA (Michael Conrad) Crypt-SecretBuffer NERDVANA (Michael Conrad)のCrypt-SecretBufferにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-5086 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
2380 7.5 重要
Network 		JDEGUEST (Jacques Deguest) Apache::API::Password JDEGUEST (Jacques Deguest)のApache::API::Passwordにおける暗号の脆弱な PRNG の使用に関する脆弱性 CWE-338
暗号における脆弱な PRNG の使用 		CVE-2026-5088 2026-05-8 12:09 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318051 7.5 HIGH
Network 		compaq microcom_6000_firmware Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force at… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-1999-1152 2024-02-9 12:15 1998-06-3 Show GitHub Exploit DB Packet Storm
318052 - pam-pgsql pam-pgsql SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements. CWE-89
SQL Injection 		CVE-2004-0366 2024-02-9 12:14 2004-05-4 Show GitHub Exploit DB Packet Storm
318053 - washington pine Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negat… CWE-129
 Improper Validation of Array Index 		CVE-2003-0721 2024-02-9 12:14 2003-09-17 Show GitHub Exploit DB Packet Storm
318054 7.5 HIGH
Network 		polycom viewstation_512
viewstation_h.323
viewstation_sp_384
viewstation_mp
viewstation_128
viewstation_dcp
viewstation_v.35
viewstation_fx_vs4000 		The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2002-0628 2024-02-9 12:14 2003-01-7 Show GitHub Exploit DB Packet Storm
318055 9.8 CRITICAL
Network 		3com superstack_ii_ps_hub_40_firmware The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the ser… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2001-1291 2024-02-9 12:14 2001-07-12 Show GitHub Exploit DB Packet Storm
318056 9.8 CRITICAL
Network 		lightwavemo consoleserver_3200_firmware Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2001-0395 2024-02-9 12:14 2001-07-2 Show GitHub Exploit DB Packet Storm
318057 9.8 CRITICAL
Network 		archilles newsworld admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and s… CWE-522
 Insufficiently Protected Credentials 		CVE-2005-3435 2024-02-9 12:13 2005-11-2 Show GitHub Exploit DB Packet Storm
318058 7.5 HIGH
Network 		openssl
canonical 		openssl
ubuntu_linux 		The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certi… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2005-2946 2024-02-9 12:13 2005-09-17 Show GitHub Exploit DB Packet Storm
318059 - armagetronad armagetron_advanced
armagetron 		Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) clai… CWE-129
 Improper Validation of Array Index 		CVE-2005-0369 2024-02-9 12:13 2005-05-2 Show GitHub Exploit DB Packet Storm
318060 9.8 CRITICAL
Network 		citrusdb citrusdb CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating t… CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2005-0408 2024-02-9 12:13 2005-02-14 Show GitHub Exploit DB Packet Storm